CMA Technology Inc.

CMA Technology Inc., doing business as CMA, a small business headquartered in Vienna, Virginia, is a prime contractor delivering software licensing, infrastructure products, and IT solutions to federal civilian and defense agencies, with 97% of recent awards as prime contracts and 3% as subcontractor work across a $40.88 billion combined potential-value footprint.

CMA's customer concentration sits heavily with the Department of Justice and Department of the Navy. The top five customers by potential value account for roughly 1% of combined potential value but anchor the near-term delivery load: Justice Management Division leads with 20 awards and $76.3 million combined potential value, followed by Naval Information Warfare Systems Command (28 awards, $69 million), Defense Information Systems Agency (18 awards, $66.1 million), FBI Headquarters Division (8 awards, $42.6 million), and Air Mobility Command (7 awards, $31.9 million). By award count, the spread is wider—Naval Sea Systems Command ranks first with 45 awards but only $2.3 million potential value, indicating many small license renewals and support-service orders; Justice Management Division and Information Warfare Systems Command together account for 48 of the top customers' 135 awards tracked. The divergence between volume and dollar rankings reflects CMA's business model: hundreds of small delivery orders against government-wide vehicles alongside occasional large-ceiling awards.

CMA's vehicle position is dominated by the Solutions for Enterprise Wide Procurement V (SEWP V) GWAC, administered by NASA, which carries 229 task orders worth $491.1 million combined potential value and is the primary delivery channel for software licensing, maintenance, and support services across federal agencies. The Multiple Award Schedule (MAS) hosts 201 task orders valued at $107.6 million, and the Chief Information Officer Commodities and Solutions (CIO-CS) GWAC—administered by HHS and used by civilian agencies—carries 58 task orders worth $103.7 million. Alliant II and the Federal Supply Schedule GS00F0020N round out the vehicle footprint. Recent representative prime work includes a $107.5 million Splunk licensing delivery order to the National Nuclear Security Administration under SEWP V (Total Small Business set-aside, ultimate completion June 2028), a $47.6 million clinical and technology management information systems infrastructure delivery order to the Indian Health Service under CIO-CS (no set-aside, ultimate completion September 2028), a $21.6 million Palo Alto Networks enterprise license agreement and support services delivery order to the Transportation Security Administration under SEWP V (Total Small Business set-aside, ultimate completion September 2028), and a $19.8 million EVERFOX Consolidation program delivery order to the Defense Information Systems Agency under SEWP V (no set-aside, ultimate completion September 2028).

Activity has grown modestly in recent years—29 awards in 2022 to 47 in 2025—then dropped to 7 awards in the first eight months of 2026 (a partial-year snapshot). Forty-five awards with ultimate completion dates in the next twenty-four months carry a combined potential value of $216.3 million, representing material recompete exposure and near-term opportunity for competitors.

CMA operates almost exclusively as a prime contractor; the vendor's subcontractor footprint is minimal by count (3% of awards) but active in specialized areas. Named primes carrying CMA as a subcontractor include Booz Allen Hamilton (CDM Defend Group BD Bridge task order, May 2026), General Dynamics Information Technology (MAINES—Managed Application, Infrastructure, Networking, Enterprise, and Security Services for EPA, April 2026), Science Applications International Corporation (NORAD/USNORTHCOM IT Enterprise Services with Everfox hardware and software, multiple awards from April 2025 onward), Caci Inc.—Federal (MC2SC hardware and CDM Defend Group bridge task orders, January–September 2025), and Peraton Enterprise Solutions (USSTRATCOM core IT infrastructure, September 2025). These sub relationships center on cross-domain solutions, network hardware, and enterprise IT infrastructure delivery to defense agencies.

Capability portfolio, grounded in the award record, centers on commercial software licensing, maintenance, and support services from major vendors: Splunk, Palo Alto Networks, Forcepoint, FireEye/Trellix, Cisco BroadWorks, Varonis, Teradata, Arista, and others. CMA functions as a solutions integrator and value-added reseller, procuring and delivering perpetual and annual licenses, hardware refresh, infrastructure modernization, and professional services. Within the SCI dataset—which captures federal service contracts above $150,000 and excludes goods, products, and non-federal revenue—CMA reported $4.1 million in invoiced revenue across FY2022–FY2024, with 6.2 FTEs in FY2022, 4.7 FTEs in FY2023, and 0.2 FTEs in FY2024; the sharp FY2024 decline reflects SCI's limitation to service contracts and CMA's heavy emphasis on product licensing (goods) rather than labor-based services. On federal services contracts captured in SCI, median government-paid rates ran around $168/hr, with senior labor pricing through $209/hr and entry-level work from $125/hr. Across SCI-reportable prime contracts, CMA performed 0% of total contractor hours through subcontractors, indicating the vendor builds its own delivery teams for service work rather than relying on subs.

Set-aside posture is mixed. CMA competes under Total Small Business set-asides on SEWP V, CIO-CS, and MAS vehicles in roughly 60% of recent delivery orders, with the remainder full-and-open. The vendor holds no published SBA designations (8(a), HUBZone, SDVOSB, WOSB) in the source, competing as an unrestricted small business on dual-track vehicles that permit set-aside and unrestricted orders in parallel.

CMA's primary customer agencies span civilian IT modernization (Justice, HHS, Treasury, State, FEMA, GSA), defense enterprise IT (Navy, Air Force, DISA, DHA), and specialized defense missions (Naval Air Warfare Center, NORAD, Fleet Cyber Command). The geographic footprint is nationwide, with performance locations including Vienna, Virginia (CMA headquarters and most common performance site), Washington DC area, and subordinate locations at military installations and civilian agency facilities nationwide (Patuxent River, MD for Naval Air Warfare Center work; Fort Meade, MD for DISA; Scott Air Force Base, IL for Air Mobility Command Teradata support).